PT-2018-13862 · Ibm · Ibm Spectrum Symphony+1

Andrea Scaduto + 1 · Published 2018-08-28 · Updated 2019-10-09 · CVE-2018-1705

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Platform Symphony versions 7.1 Fix Pack 1 through 7.1.1 IBM Spectrum Symphony versions 7.1.2 through 7.2.0.2

Description The issue is an information disclosure vulnerability that could allow an authenticated attacker to obtain highly sensitive information.

Recommendations For IBM Platform Symphony versions 7.1 Fix Pack 1 through 7.1.1, update to a version that contains the fix for this issue. For IBM Spectrum Symphony versions 7.1.2 through 7.2.0.2, update to a version that contains the fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-1705

Affected Products

Ibm Platform Symphony

Ibm Spectrum Symphony

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-1705 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1705 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/146340 · Vendor Advisory
• https://ibm.com/support/docview.wss?uid=ibm10719665 · Vendor Advisory